Summary
- The launch: Infosec Institute announced the pilot of Infosec Skills Verification, a GenAI-powered feature in its Infosec Skills platform, on April 23, 2025.
- What it does is assess hands-on security skills, including how a person approaches and solves a task, not only whether they finish it.
- Why: Employers struggle to verify practical skills beyond certifications and degrees, especially when hiring remotely.
- Status: It is a pilot program, and Infosec is accepting applications from organizations that want early access.
Infosec Bets on AI to Check Real Skills
Cybersecurity employers have a hard time telling whether a candidate can actually do the job. Certifications and interviews show only part of the picture. Infosec Institute, a cybersecurity training company that is part of Cengage Group, says generative AI can help fill the gap. It launched a pilot of Infosec Skills Verification, which uses GenAI to evaluate hands-on technical work, and showcased it at the RSA Conference in San Francisco from April 28 to May 1, 2025.
How Skills Verification Works
The tool sits inside the Infosec Skills platform. Rather than just checking whether a task was completed, it uses AI to evaluate the approach, efficiency and problem-solving methods a person uses. Infosec says that gives organizations insight into the real capabilities of both current staff and job candidates.
Going Beyond Credentials
Employers already value hands-on experience. Infosec cites ISACA’s State of Cybersecurity report, in which 95% of cybersecurity leaders said hands-on experience is important in judging whether a candidate is qualified, and 73% rated it “very important.” Yet verifying that experience has been hard, especially in remote hiring.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
Using It for Training Too
The tool is aimed at upskilling as well as hiring. Infosec points to the ISC2 Workforce Study, which found that “almost 60% of respondents agree that skills gaps have significantly impacted their ability to secure the organization.” Skills Verification is meant to help security and learning leaders target training and confirm that new skills actually stick. It builds on other recent AI features from Cengage Group, including Infosec’s Skills Navigator.
What Infosec Says
“In a field where real-world skills translate directly to organizational security, the ability to verify hands-on capabilities is invaluable,” said Keatron Evans, VP of Portfolio Product and AI Strategy at Infosec. “This isn’t about checking boxes — it’s about witnessing authentic technical mastery in action.”
What to Watch
It is still a pilot. Participants get early access and give feedback that will shape how the feature develops. The open question is how well AI scoring holds up against real job performance, and whether employers trust it enough to change how they hire.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
The Takeaway for Hiring Managers
For hiring managers, the idea is sound even if the tool is new: test what candidates can do, not only what credentials they hold. Organizations that want to try Skills Verification can apply to join the pilot through Infosec.
Newer CyberExperts coverage on this topic
This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.
Citrix NetScaler CVE-2026-19490: The Auth Bypass That Went From PoC to Probes in a Day
CVE-2026-19490 is a CVSS 9.3 NetScaler Gateway/AAA auth bypass. A public PoC on Sept 2 was followed by live probes within a...
PaperCut NG/MF: The Print Server That Learned Remote Code Execution Again
CVE-2026-81578 and CVE-2026-82078 chain to pre-auth RCE on PaperCut Application Server. Confirm Emergency Patch Release 2, restrict admin exposure, and hunt like...
JFrog Artifactory CVE-2026-82329: Empty Join Key, Full Admin Token, Busy Scanners
CVE-2026-82329 lets attackers forge Artifactory admin tokens via a deterministic empty join key. Mass scanning peaked near 406,000 attempts; patch fixed builds...
Friday’s brief: Apache’s HTTP/2 fix, then Check Point break-ins, a ScreenConnect add-on and a GitHub secret stealer
The fastest way to catch up on what changed after this article was published.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.